<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html lang="en">

<head>
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  <title>LCOV - coverage_clean.info - home/liying/sqlcc/src/sql_executor/user_manager.cpp</title>
  <link rel="stylesheet" type="text/css" href="../../../../../gcov.css">
</head>

<body>

          <table width="100%" border=0 cellspacing=0 cellpadding=0>
            <tr><td class="title">LCOV - code coverage report</td></tr>
            <tr><td class="ruler"><img src="../../../../../glass.png" width=3 height=3 alt=""></td></tr>

            <tr>
              <td width="100%">
                <table cellpadding=1 border=0 width="100%">
          <tr>
            <td width="10%" class="headerItem">Current view:</td>
            <td width="10%" class="headerValue"><a href="../../../../../index.html">top level</a> - <a href="index.html">/home/liying/sqlcc/src/sql_executor</a> - user_manager.cpp<span style="font-size: 80%;"> (source / <a href="user_manager.cpp.func-c.html">functions</a>)</span></td>
            <td width="5%"></td>
            <td width="5%"></td>
            <td width="5%" class="headerCovTableHead">Coverage</td>
            <td width="5%" class="headerCovTableHead" title="Covered + Uncovered code">Total</td>
            <td width="5%" class="headerCovTableHead" title="Exercised code only">Hit</td>
          </tr>
          <tr>
            <td class="headerItem">Test:</td>
            <td class="headerValue">coverage_clean.info</td>
            <td></td>
            <td class="headerItem">Lines:</td>
            <td class="headerCovTableEntryLo">24.2&nbsp;%</td>
            <td class="headerCovTableEntry">153</td>
            <td class="headerCovTableEntry">37</td>
          </tr>
          <tr>
            <td class="headerItem">Test Date:</td>
            <td class="headerValue">2025-11-25 04:45:29</td>
            <td></td>
            <td class="headerItem">Functions:</td>
            <td class="headerCovTableEntryLo">38.9&nbsp;%</td>
            <td class="headerCovTableEntry">18</td>
            <td class="headerCovTableEntry">7</td>
          </tr>
                  <tr><td><img src="../../../../../glass.png" width=3 height=3 alt=""></td></tr>
                </table>
              </td>
            </tr>

            <tr><td class="ruler"><img src="../../../../../glass.png" width=3 height=3 alt=""></td></tr>
          </table>

          <table cellpadding=0 cellspacing=0 border=0>
            <tr>
              <td><br></td>
            </tr>
            <tr>
              <td>
<pre class="sourceHeading">            Line data    Source code</pre>
<pre class="source">
<span id="L1"><span class="lineNum">       1</span>              : #include &quot;user_manager.h&quot;</span>
<span id="L2"><span class="lineNum">       2</span>              : #include &lt;algorithm&gt;</span>
<span id="L3"><span class="lineNum">       3</span>              : #include &lt;cstring&gt;</span>
<span id="L4"><span class="lineNum">       4</span>              : #include &lt;iostream&gt;</span>
<span id="L5"><span class="lineNum">       5</span>              : #include &lt;random&gt;</span>
<span id="L6"><span class="lineNum">       6</span>              : </span>
<span id="L7"><span class="lineNum">       7</span>              : namespace sqlcc {</span>
<span id="L8"><span class="lineNum">       8</span>              : </span>
<span id="L9"><span class="lineNum">       9</span>              : // 用户角色定义</span>
<span id="L10"><span class="lineNum">      10</span>              : const std::string UserManager::ROLE_SUPERUSER = &quot;SUPERUSER&quot;;</span>
<span id="L11"><span class="lineNum">      11</span>              : const std::string UserManager::ROLE_ADMIN = &quot;ADMIN&quot;;</span>
<span id="L12"><span class="lineNum">      12</span>              : const std::string UserManager::ROLE_USER = &quot;USER&quot;;</span>
<span id="L13"><span class="lineNum">      13</span>              : </span>
<span id="L14"><span class="lineNum">      14</span>              : // 权限定义</span>
<span id="L15"><span class="lineNum">      15</span>              : const std::string UserManager::PRIVILEGE_CREATE = &quot;CREATE&quot;;</span>
<span id="L16"><span class="lineNum">      16</span>              : const std::string UserManager::PRIVILEGE_SELECT = &quot;SELECT&quot;;</span>
<span id="L17"><span class="lineNum">      17</span>              : const std::string UserManager::PRIVILEGE_INSERT = &quot;INSERT&quot;;</span>
<span id="L18"><span class="lineNum">      18</span>              : const std::string UserManager::PRIVILEGE_UPDATE = &quot;UPDATE&quot;;</span>
<span id="L19"><span class="lineNum">      19</span>              : const std::string UserManager::PRIVILEGE_DELETE = &quot;DELETE&quot;;</span>
<span id="L20"><span class="lineNum">      20</span>              : const std::string UserManager::PRIVILEGE_DROP = &quot;DROP&quot;;</span>
<span id="L21"><span class="lineNum">      21</span>              : const std::string UserManager::PRIVILEGE_ALTER = &quot;ALTER&quot;;</span>
<span id="L22"><span class="lineNum">      22</span>              : const std::string UserManager::PRIVILEGE_ALL = &quot;ALL&quot;;</span>
<span id="L23"><span class="lineNum">      23</span>              : </span>
<span id="L24"><span class="lineNum">      24</span> <span class="tlaGNC tlaBgGNC">           2 : UserManager::UserManager() {</span></span>
<span id="L25"><span class="lineNum">      25</span>              :   // 创建默认超级用户</span>
<span id="L26"><span class="lineNum">      26</span> <span class="tlaGNC">           2 :   CreateDefaultSuperuser();</span></span>
<span id="L27"><span class="lineNum">      27</span> <span class="tlaGNC">           2 : }</span></span>
<span id="L28"><span class="lineNum">      28</span>              : </span>
<span id="L29"><span class="lineNum">      29</span> <span class="tlaGNC">           2 : UserManager::~UserManager() = default;</span></span>
<span id="L30"><span class="lineNum">      30</span>              : </span>
<span id="L31"><span class="lineNum">      31</span>              : // 创建默认超级用户</span>
<span id="L32"><span class="lineNum">      32</span> <span class="tlaGNC">           2 : void UserManager::CreateDefaultSuperuser() {</span></span>
<span id="L33"><span class="lineNum">      33</span>              :   // 创建默认超级用户，用户名: admin, 密码: admin</span>
<span id="L34"><span class="lineNum">      34</span> <span class="tlaGNC">           2 :   User default_superuser;</span></span>
<span id="L35"><span class="lineNum">      35</span> <span class="tlaGNC">           2 :   default_superuser.username = &quot;admin&quot;;</span></span>
<span id="L36"><span class="lineNum">      36</span>              :   // 密码暂存明文，实际应用中应使用哈希存储</span>
<span id="L37"><span class="lineNum">      37</span> <span class="tlaGNC">           2 :   default_superuser.password_hash = &quot;admin&quot;;</span></span>
<span id="L38"><span class="lineNum">      38</span> <span class="tlaGNC">           2 :   default_superuser.role = ROLE_SUPERUSER;</span></span>
<span id="L39"><span class="lineNum">      39</span> <span class="tlaGNC">           2 :   default_superuser.is_active = true;</span></span>
<span id="L40"><span class="lineNum">      40</span> <span class="tlaGNC">           2 :   default_superuser.created_at = GetCurrentTimeString();</span></span>
<span id="L41"><span class="lineNum">      41</span>              : </span>
<span id="L42"><span class="lineNum">      42</span> <span class="tlaGNC">           2 :   users_[default_superuser.username] = default_superuser;</span></span>
<span id="L43"><span class="lineNum">      43</span>              : </span>
<span id="L44"><span class="lineNum">      44</span>              :   // 默认超级用户拥有所有数据库和表的所有权限</span>
<span id="L45"><span class="lineNum">      45</span> <span class="tlaGNC">           2 :   GrantAllPrivilegesToSuperuser(default_superuser.username);</span></span>
<span id="L46"><span class="lineNum">      46</span> <span class="tlaGNC">           2 : }</span></span>
<span id="L47"><span class="lineNum">      47</span>              : </span>
<span id="L48"><span class="lineNum">      48</span>              : // 获取当前时间字符串</span>
<span id="L49"><span class="lineNum">      49</span> <span class="tlaGNC">           2 : std::string UserManager::GetCurrentTimeString() {</span></span>
<span id="L50"><span class="lineNum">      50</span> <span class="tlaGNC">           2 :   auto now = std::chrono::system_clock::now();</span></span>
<span id="L51"><span class="lineNum">      51</span> <span class="tlaGNC">           2 :   auto now_time_t = std::chrono::system_clock::to_time_t(now);</span></span>
<span id="L52"><span class="lineNum">      52</span> <span class="tlaGNC">           2 :   std::tm now_tm = *std::localtime(&amp;now_time_t);</span></span>
<span id="L53"><span class="lineNum">      53</span>              : </span>
<span id="L54"><span class="lineNum">      54</span>              :   char buffer[20];</span>
<span id="L55"><span class="lineNum">      55</span> <span class="tlaGNC">           2 :   std::strftime(buffer, sizeof(buffer), &quot;%Y-%m-%d %H:%M:%S&quot;, &amp;now_tm);</span></span>
<span id="L56"><span class="lineNum">      56</span> <span class="tlaGNC">           4 :   return std::string(buffer);</span></span>
<span id="L57"><span class="lineNum">      57</span>              : }</span>
<span id="L58"><span class="lineNum">      58</span>              : </span>
<span id="L59"><span class="lineNum">      59</span>              : // 为超级用户授予所有权限</span>
<span id="L60"><span class="lineNum">      60</span> <span class="tlaGNC">           2 : void UserManager::GrantAllPrivilegesToSuperuser(const std::string &amp;username) {</span></span>
<span id="L61"><span class="lineNum">      61</span>              :   // 为所有资源类型授予所有权限</span>
<span id="L62"><span class="lineNum">      62</span> <span class="tlaGNC">           6 :   GrantPrivilege(username, &quot;*&quot;, &quot;*&quot;, PRIVILEGE_ALL);</span></span>
<span id="L63"><span class="lineNum">      63</span> <span class="tlaGNC">           2 : }</span></span>
<span id="L64"><span class="lineNum">      64</span>              : </span>
<span id="L65"><span class="lineNum">      65</span>              : // 创建新用户</span>
<span id="L66"><span class="lineNum">      66</span> <span class="tlaUNC tlaBgUNC">           0 : bool UserManager::CreateUser(const std::string &amp;username,</span></span>
<span id="L67"><span class="lineNum">      67</span>              :                              const std::string &amp;password,</span>
<span id="L68"><span class="lineNum">      68</span>              :                              const std::string &amp;role) {</span>
<span id="L69"><span class="lineNum">      69</span> <span class="tlaUNC">           0 :   std::lock_guard&lt;std::mutex&gt; lock(mutex_);</span></span>
<span id="L70"><span class="lineNum">      70</span>              : </span>
<span id="L71"><span class="lineNum">      71</span>              :   // 检查用户是否已存在</span>
<span id="L72"><span class="lineNum">      72</span> <span class="tlaUNC">           0 :   if (users_.find(username) != users_.end()) {</span></span>
<span id="L73"><span class="lineNum">      73</span> <span class="tlaUNC">           0 :     last_error_ = &quot;User already exists: &quot; + username;</span></span>
<span id="L74"><span class="lineNum">      74</span> <span class="tlaUNC">           0 :     return false;</span></span>
<span id="L75"><span class="lineNum">      75</span>              :   }</span>
<span id="L76"><span class="lineNum">      76</span>              : </span>
<span id="L77"><span class="lineNum">      77</span>              :   // 验证角色有效性</span>
<span id="L78"><span class="lineNum">      78</span> <span class="tlaUNC">           0 :   if (role != ROLE_SUPERUSER &amp;&amp; role != ROLE_ADMIN &amp;&amp; role != ROLE_USER) {</span></span>
<span id="L79"><span class="lineNum">      79</span> <span class="tlaUNC">           0 :     last_error_ = &quot;Invalid role: &quot; + role;</span></span>
<span id="L80"><span class="lineNum">      80</span> <span class="tlaUNC">           0 :     return false;</span></span>
<span id="L81"><span class="lineNum">      81</span>              :   }</span>
<span id="L82"><span class="lineNum">      82</span>              : </span>
<span id="L83"><span class="lineNum">      83</span>              :   // 创建用户</span>
<span id="L84"><span class="lineNum">      84</span> <span class="tlaUNC">           0 :   User new_user;</span></span>
<span id="L85"><span class="lineNum">      85</span> <span class="tlaUNC">           0 :   new_user.username = username;</span></span>
<span id="L86"><span class="lineNum">      86</span>              :   // 密码暂存明文，实际应用中应使用哈希存储</span>
<span id="L87"><span class="lineNum">      87</span> <span class="tlaUNC">           0 :   new_user.password_hash = password;</span></span>
<span id="L88"><span class="lineNum">      88</span> <span class="tlaUNC">           0 :   new_user.role = role;</span></span>
<span id="L89"><span class="lineNum">      89</span> <span class="tlaUNC">           0 :   new_user.is_active = true;</span></span>
<span id="L90"><span class="lineNum">      90</span> <span class="tlaUNC">           0 :   new_user.created_at = GetCurrentTimeString();</span></span>
<span id="L91"><span class="lineNum">      91</span>              : </span>
<span id="L92"><span class="lineNum">      92</span> <span class="tlaUNC">           0 :   users_[username] = new_user;</span></span>
<span id="L93"><span class="lineNum">      93</span>              : </span>
<span id="L94"><span class="lineNum">      94</span>              :   // 默认情况下，普通用户没有权限</span>
<span id="L95"><span class="lineNum">      95</span> <span class="tlaUNC">           0 :   if (role == ROLE_USER) {</span></span>
<span id="L96"><span class="lineNum">      96</span>              :     // 用户可以查看自己的权限信息</span>
<span id="L97"><span class="lineNum">      97</span> <span class="tlaUNC">           0 :     GrantPrivilege(username, &quot;*&quot;, &quot;user_permissions&quot;, PRIVILEGE_SELECT);</span></span>
<span id="L98"><span class="lineNum">      98</span>              :   }</span>
<span id="L99"><span class="lineNum">      99</span>              : </span>
<span id="L100"><span class="lineNum">     100</span>              :   // 管理员拥有管理权限但不是超级用户权限</span>
<span id="L101"><span class="lineNum">     101</span> <span class="tlaUNC">           0 :   else if (role == ROLE_ADMIN) {</span></span>
<span id="L102"><span class="lineNum">     102</span> <span class="tlaUNC">           0 :     GrantPrivilege(username, &quot;*&quot;, &quot;*&quot;, PRIVILEGE_SELECT);</span></span>
<span id="L103"><span class="lineNum">     103</span> <span class="tlaUNC">           0 :     GrantPrivilege(username, &quot;*&quot;, &quot;*&quot;, PRIVILEGE_INSERT);</span></span>
<span id="L104"><span class="lineNum">     104</span> <span class="tlaUNC">           0 :     GrantPrivilege(username, &quot;*&quot;, &quot;*&quot;, PRIVILEGE_UPDATE);</span></span>
<span id="L105"><span class="lineNum">     105</span> <span class="tlaUNC">           0 :     GrantPrivilege(username, &quot;*&quot;, &quot;*&quot;, PRIVILEGE_DELETE);</span></span>
<span id="L106"><span class="lineNum">     106</span>              :   }</span>
<span id="L107"><span class="lineNum">     107</span>              : </span>
<span id="L108"><span class="lineNum">     108</span>              :   // 超级用户拥有所有权限</span>
<span id="L109"><span class="lineNum">     109</span> <span class="tlaUNC">           0 :   else if (role == ROLE_SUPERUSER) {</span></span>
<span id="L110"><span class="lineNum">     110</span> <span class="tlaUNC">           0 :     GrantAllPrivilegesToSuperuser(username);</span></span>
<span id="L111"><span class="lineNum">     111</span>              :   }</span>
<span id="L112"><span class="lineNum">     112</span>              : </span>
<span id="L113"><span class="lineNum">     113</span> <span class="tlaUNC">           0 :   return true;</span></span>
<span id="L114"><span class="lineNum">     114</span> <span class="tlaUNC">           0 : }</span></span>
<span id="L115"><span class="lineNum">     115</span>              : </span>
<span id="L116"><span class="lineNum">     116</span>              : // 删除用户</span>
<span id="L117"><span class="lineNum">     117</span> <span class="tlaUNC">           0 : bool UserManager::DropUser(const std::string &amp;username) {</span></span>
<span id="L118"><span class="lineNum">     118</span> <span class="tlaUNC">           0 :   std::lock_guard&lt;std::mutex&gt; lock(mutex_);</span></span>
<span id="L119"><span class="lineNum">     119</span>              : </span>
<span id="L120"><span class="lineNum">     120</span>              :   // 检查用户是否存在</span>
<span id="L121"><span class="lineNum">     121</span> <span class="tlaUNC">           0 :   if (users_.find(username) == users_.end()) {</span></span>
<span id="L122"><span class="lineNum">     122</span> <span class="tlaUNC">           0 :     last_error_ = &quot;User not found: &quot; + username;</span></span>
<span id="L123"><span class="lineNum">     123</span> <span class="tlaUNC">           0 :     return false;</span></span>
<span id="L124"><span class="lineNum">     124</span>              :   }</span>
<span id="L125"><span class="lineNum">     125</span>              : </span>
<span id="L126"><span class="lineNum">     126</span>              :   // 不允许删除默认超级用户</span>
<span id="L127"><span class="lineNum">     127</span> <span class="tlaUNC">           0 :   if (username == &quot;admin&quot;) {</span></span>
<span id="L128"><span class="lineNum">     128</span> <span class="tlaUNC">           0 :     last_error_ = &quot;Cannot drop default superuser 'admin'&quot;;</span></span>
<span id="L129"><span class="lineNum">     129</span> <span class="tlaUNC">           0 :     return false;</span></span>
<span id="L130"><span class="lineNum">     130</span>              :   }</span>
<span id="L131"><span class="lineNum">     131</span>              : </span>
<span id="L132"><span class="lineNum">     132</span>              :   // 删除用户</span>
<span id="L133"><span class="lineNum">     133</span> <span class="tlaUNC">           0 :   users_.erase(username);</span></span>
<span id="L134"><span class="lineNum">     134</span>              : </span>
<span id="L135"><span class="lineNum">     135</span>              :   // 删除用户的所有权限</span>
<span id="L136"><span class="lineNum">     136</span> <span class="tlaUNC">           0 :   RemoveUserPrivileges(username);</span></span>
<span id="L137"><span class="lineNum">     137</span>              : </span>
<span id="L138"><span class="lineNum">     138</span> <span class="tlaUNC">           0 :   return true;</span></span>
<span id="L139"><span class="lineNum">     139</span> <span class="tlaUNC">           0 : }</span></span>
<span id="L140"><span class="lineNum">     140</span>              : </span>
<span id="L141"><span class="lineNum">     141</span>              : // 更改用户密码</span>
<span id="L142"><span class="lineNum">     142</span> <span class="tlaUNC">           0 : bool UserManager::AlterUserPassword(const std::string &amp;username,</span></span>
<span id="L143"><span class="lineNum">     143</span>              :                                     const std::string &amp;new_password) {</span>
<span id="L144"><span class="lineNum">     144</span> <span class="tlaUNC">           0 :   std::lock_guard&lt;std::mutex&gt; lock(mutex_);</span></span>
<span id="L145"><span class="lineNum">     145</span>              : </span>
<span id="L146"><span class="lineNum">     146</span>              :   // 检查用户是否存在</span>
<span id="L147"><span class="lineNum">     147</span> <span class="tlaUNC">           0 :   auto it = users_.find(username);</span></span>
<span id="L148"><span class="lineNum">     148</span> <span class="tlaUNC">           0 :   if (it == users_.end()) {</span></span>
<span id="L149"><span class="lineNum">     149</span> <span class="tlaUNC">           0 :     last_error_ = &quot;User not found: &quot; + username;</span></span>
<span id="L150"><span class="lineNum">     150</span> <span class="tlaUNC">           0 :     return false;</span></span>
<span id="L151"><span class="lineNum">     151</span>              :   }</span>
<span id="L152"><span class="lineNum">     152</span>              : </span>
<span id="L153"><span class="lineNum">     153</span>              :   // 更新密码</span>
<span id="L154"><span class="lineNum">     154</span> <span class="tlaUNC">           0 :   it-&gt;second.password_hash = new_password;</span></span>
<span id="L155"><span class="lineNum">     155</span> <span class="tlaUNC">           0 :   return true;</span></span>
<span id="L156"><span class="lineNum">     156</span> <span class="tlaUNC">           0 : }</span></span>
<span id="L157"><span class="lineNum">     157</span>              : </span>
<span id="L158"><span class="lineNum">     158</span>              : // 用户登录验证</span>
<span id="L159"><span class="lineNum">     159</span> <span class="tlaUNC">           0 : bool UserManager::AuthenticateUser(const std::string &amp;username,</span></span>
<span id="L160"><span class="lineNum">     160</span>              :                                    const std::string &amp;password) {</span>
<span id="L161"><span class="lineNum">     161</span> <span class="tlaUNC">           0 :   std::lock_guard&lt;std::mutex&gt; lock(mutex_);</span></span>
<span id="L162"><span class="lineNum">     162</span>              : </span>
<span id="L163"><span class="lineNum">     163</span> <span class="tlaUNC">           0 :   auto it = users_.find(username);</span></span>
<span id="L164"><span class="lineNum">     164</span> <span class="tlaUNC">           0 :   if (it == users_.end()) {</span></span>
<span id="L165"><span class="lineNum">     165</span> <span class="tlaUNC">           0 :     last_error_ = &quot;Invalid username or password&quot;;</span></span>
<span id="L166"><span class="lineNum">     166</span> <span class="tlaUNC">           0 :     return false;</span></span>
<span id="L167"><span class="lineNum">     167</span>              :   }</span>
<span id="L168"><span class="lineNum">     168</span>              : </span>
<span id="L169"><span class="lineNum">     169</span>              :   // 检查用户是否被禁用</span>
<span id="L170"><span class="lineNum">     170</span> <span class="tlaUNC">           0 :   if (!it-&gt;second.is_active) {</span></span>
<span id="L171"><span class="lineNum">     171</span> <span class="tlaUNC">           0 :     last_error_ = &quot;User account is disabled&quot;;</span></span>
<span id="L172"><span class="lineNum">     172</span> <span class="tlaUNC">           0 :     return false;</span></span>
<span id="L173"><span class="lineNum">     173</span>              :   }</span>
<span id="L174"><span class="lineNum">     174</span>              : </span>
<span id="L175"><span class="lineNum">     175</span>              :   // 简单的密码验证，实际应用中应使用哈希比较</span>
<span id="L176"><span class="lineNum">     176</span> <span class="tlaUNC">           0 :   if (it-&gt;second.password_hash != password) {</span></span>
<span id="L177"><span class="lineNum">     177</span> <span class="tlaUNC">           0 :     last_error_ = &quot;Invalid username or password&quot;;</span></span>
<span id="L178"><span class="lineNum">     178</span> <span class="tlaUNC">           0 :     return false;</span></span>
<span id="L179"><span class="lineNum">     179</span>              :   }</span>
<span id="L180"><span class="lineNum">     180</span>              : </span>
<span id="L181"><span class="lineNum">     181</span> <span class="tlaUNC">           0 :   return true;</span></span>
<span id="L182"><span class="lineNum">     182</span> <span class="tlaUNC">           0 : }</span></span>
<span id="L183"><span class="lineNum">     183</span>              : </span>
<span id="L184"><span class="lineNum">     184</span>              : // 授权权限</span>
<span id="L185"><span class="lineNum">     185</span> <span class="tlaGNC tlaBgGNC">           7 : bool UserManager::GrantPrivilege(const std::string &amp;username,</span></span>
<span id="L186"><span class="lineNum">     186</span>              :                                  const std::string &amp;database,</span>
<span id="L187"><span class="lineNum">     187</span>              :                                  const std::string &amp;table,</span>
<span id="L188"><span class="lineNum">     188</span>              :                                  const std::string &amp;privilege) {</span>
<span id="L189"><span class="lineNum">     189</span> <span class="tlaGNC">           7 :   std::lock_guard&lt;std::mutex&gt; lock(mutex_);</span></span>
<span id="L190"><span class="lineNum">     190</span>              : </span>
<span id="L191"><span class="lineNum">     191</span>              :   // 检查用户是否存在</span>
<span id="L192"><span class="lineNum">     192</span> <span class="tlaGNC">           7 :   if (users_.find(username) == users_.end()) {</span></span>
<span id="L193"><span class="lineNum">     193</span> <span class="tlaGNC">           5 :     last_error_ = &quot;User not found: &quot; + username;</span></span>
<span id="L194"><span class="lineNum">     194</span> <span class="tlaGNC">           5 :     return false;</span></span>
<span id="L195"><span class="lineNum">     195</span>              :   }</span>
<span id="L196"><span class="lineNum">     196</span>              : </span>
<span id="L197"><span class="lineNum">     197</span>              :   // 创建权限项</span>
<span id="L198"><span class="lineNum">     198</span> <span class="tlaGNC">           2 :   Permission perm;</span></span>
<span id="L199"><span class="lineNum">     199</span> <span class="tlaGNC">           2 :   perm.username = username;</span></span>
<span id="L200"><span class="lineNum">     200</span> <span class="tlaGNC">           2 :   perm.database = database;</span></span>
<span id="L201"><span class="lineNum">     201</span> <span class="tlaGNC">           2 :   perm.table = table;</span></span>
<span id="L202"><span class="lineNum">     202</span> <span class="tlaGNC">           2 :   perm.privilege = privilege;</span></span>
<span id="L203"><span class="lineNum">     203</span>              : </span>
<span id="L204"><span class="lineNum">     204</span>              :   // 添加到权限集合</span>
<span id="L205"><span class="lineNum">     205</span> <span class="tlaGNC">           2 :   permissions_.push_back(perm);</span></span>
<span id="L206"><span class="lineNum">     206</span>              : </span>
<span id="L207"><span class="lineNum">     207</span> <span class="tlaGNC">           2 :   return true;</span></span>
<span id="L208"><span class="lineNum">     208</span> <span class="tlaGNC">           7 : }</span></span>
<span id="L209"><span class="lineNum">     209</span>              : </span>
<span id="L210"><span class="lineNum">     210</span>              : // 撤销权限</span>
<span id="L211"><span class="lineNum">     211</span> <span class="tlaUNC tlaBgUNC">           0 : bool UserManager::RevokePrivilege(const std::string &amp;username,</span></span>
<span id="L212"><span class="lineNum">     212</span>              :                                   const std::string &amp;database,</span>
<span id="L213"><span class="lineNum">     213</span>              :                                   const std::string &amp;table,</span>
<span id="L214"><span class="lineNum">     214</span>              :                                   const std::string &amp;privilege) {</span>
<span id="L215"><span class="lineNum">     215</span> <span class="tlaUNC">           0 :   std::lock_guard&lt;std::mutex&gt; lock(mutex_);</span></span>
<span id="L216"><span class="lineNum">     216</span>              : </span>
<span id="L217"><span class="lineNum">     217</span>              :   // 不允许撤销超级用户的权限</span>
<span id="L218"><span class="lineNum">     218</span> <span class="tlaUNC">           0 :   auto user_it = users_.find(username);</span></span>
<span id="L219"><span class="lineNum">     219</span> <span class="tlaUNC">           0 :   if (user_it != users_.end() &amp;&amp; user_it-&gt;second.role == ROLE_SUPERUSER) {</span></span>
<span id="L220"><span class="lineNum">     220</span> <span class="tlaUNC">           0 :     last_error_ = &quot;Cannot revoke privileges from superuser&quot;;</span></span>
<span id="L221"><span class="lineNum">     221</span> <span class="tlaUNC">           0 :     return false;</span></span>
<span id="L222"><span class="lineNum">     222</span>              :   }</span>
<span id="L223"><span class="lineNum">     223</span>              : </span>
<span id="L224"><span class="lineNum">     224</span>              :   // 查找并移除匹配的权限</span>
<span id="L225"><span class="lineNum">     225</span> <span class="tlaUNC">           0 :   auto new_end = std::remove_if(</span></span>
<span id="L226"><span class="lineNum">     226</span> <span class="tlaUNC">           0 :       permissions_.begin(), permissions_.end(), [&amp;](const Permission &amp;perm) {</span></span>
<span id="L227"><span class="lineNum">     227</span> <span class="tlaUNC">           0 :         return perm.username == username &amp;&amp;</span></span>
<span id="L228"><span class="lineNum">     228</span> <span class="tlaUNC">           0 :                (database == &quot;*&quot; || perm.database == database) &amp;&amp;</span></span>
<span id="L229"><span class="lineNum">     229</span> <span class="tlaUNC">           0 :                (table == &quot;*&quot; || perm.table == table) &amp;&amp;</span></span>
<span id="L230"><span class="lineNum">     230</span> <span class="tlaUNC">           0 :                (privilege == &quot;ALL&quot; || perm.privilege == privilege);</span></span>
<span id="L231"><span class="lineNum">     231</span>              :       });</span>
<span id="L232"><span class="lineNum">     232</span>              : </span>
<span id="L233"><span class="lineNum">     233</span> <span class="tlaUNC">           0 :   if (new_end == permissions_.end()) {</span></span>
<span id="L234"><span class="lineNum">     234</span> <span class="tlaUNC">           0 :     last_error_ = &quot;No matching privileges found&quot;;</span></span>
<span id="L235"><span class="lineNum">     235</span> <span class="tlaUNC">           0 :     return false;</span></span>
<span id="L236"><span class="lineNum">     236</span>              :   }</span>
<span id="L237"><span class="lineNum">     237</span>              : </span>
<span id="L238"><span class="lineNum">     238</span> <span class="tlaUNC">           0 :   permissions_.erase(new_end, permissions_.end());</span></span>
<span id="L239"><span class="lineNum">     239</span> <span class="tlaUNC">           0 :   return true;</span></span>
<span id="L240"><span class="lineNum">     240</span> <span class="tlaUNC">           0 : }</span></span>
<span id="L241"><span class="lineNum">     241</span>              : </span>
<span id="L242"><span class="lineNum">     242</span>              : // 检查用户是否有权限执行操作</span>
<span id="L243"><span class="lineNum">     243</span> <span class="tlaUNC">           0 : bool UserManager::CheckPermission(const std::string &amp;username,</span></span>
<span id="L244"><span class="lineNum">     244</span>              :                                   const std::string &amp;database,</span>
<span id="L245"><span class="lineNum">     245</span>              :                                   const std::string &amp;table,</span>
<span id="L246"><span class="lineNum">     246</span>              :                                   const std::string &amp;required_privilege) {</span>
<span id="L247"><span class="lineNum">     247</span> <span class="tlaUNC">           0 :   std::lock_guard&lt;std::mutex&gt; lock(mutex_);</span></span>
<span id="L248"><span class="lineNum">     248</span>              : </span>
<span id="L249"><span class="lineNum">     249</span>              :   // 检查用户是否存在</span>
<span id="L250"><span class="lineNum">     250</span> <span class="tlaUNC">           0 :   auto user_it = users_.find(username);</span></span>
<span id="L251"><span class="lineNum">     251</span> <span class="tlaUNC">           0 :   if (user_it == users_.end()) {</span></span>
<span id="L252"><span class="lineNum">     252</span> <span class="tlaUNC">           0 :     return false;</span></span>
<span id="L253"><span class="lineNum">     253</span>              :   }</span>
<span id="L254"><span class="lineNum">     254</span>              : </span>
<span id="L255"><span class="lineNum">     255</span>              :   // 超级用户拥有所有权限</span>
<span id="L256"><span class="lineNum">     256</span> <span class="tlaUNC">           0 :   if (user_it-&gt;second.role == ROLE_SUPERUSER) {</span></span>
<span id="L257"><span class="lineNum">     257</span> <span class="tlaUNC">           0 :     return true;</span></span>
<span id="L258"><span class="lineNum">     258</span>              :   }</span>
<span id="L259"><span class="lineNum">     259</span>              : </span>
<span id="L260"><span class="lineNum">     260</span>              :   // 检查是否有权限</span>
<span id="L261"><span class="lineNum">     261</span> <span class="tlaUNC">           0 :   for (const auto &amp;perm : permissions_) {</span></span>
<span id="L262"><span class="lineNum">     262</span>              :     // 用户匹配</span>
<span id="L263"><span class="lineNum">     263</span> <span class="tlaUNC">           0 :     if (perm.username != username)</span></span>
<span id="L264"><span class="lineNum">     264</span> <span class="tlaUNC">           0 :       continue;</span></span>
<span id="L265"><span class="lineNum">     265</span>              : </span>
<span id="L266"><span class="lineNum">     266</span>              :     // 数据库匹配（精确匹配或通配符）</span>
<span id="L267"><span class="lineNum">     267</span> <span class="tlaUNC">           0 :     if (perm.database != &quot;*&quot; &amp;&amp; perm.database != database)</span></span>
<span id="L268"><span class="lineNum">     268</span> <span class="tlaUNC">           0 :       continue;</span></span>
<span id="L269"><span class="lineNum">     269</span>              : </span>
<span id="L270"><span class="lineNum">     270</span>              :     // 表匹配（精确匹配或通配符）</span>
<span id="L271"><span class="lineNum">     271</span> <span class="tlaUNC">           0 :     if (perm.table != &quot;*&quot; &amp;&amp; perm.table != table)</span></span>
<span id="L272"><span class="lineNum">     272</span> <span class="tlaUNC">           0 :       continue;</span></span>
<span id="L273"><span class="lineNum">     273</span>              : </span>
<span id="L274"><span class="lineNum">     274</span>              :     // 权限匹配：ALL权限或精确权限匹配</span>
<span id="L275"><span class="lineNum">     275</span> <span class="tlaUNC">           0 :     if (perm.privilege == PRIVILEGE_ALL ||</span></span>
<span id="L276"><span class="lineNum">     276</span> <span class="tlaUNC">           0 :         perm.privilege == required_privilege) {</span></span>
<span id="L277"><span class="lineNum">     277</span> <span class="tlaUNC">           0 :       return true;</span></span>
<span id="L278"><span class="lineNum">     278</span>              :     }</span>
<span id="L279"><span class="lineNum">     279</span>              :   }</span>
<span id="L280"><span class="lineNum">     280</span>              : </span>
<span id="L281"><span class="lineNum">     281</span> <span class="tlaUNC">           0 :   return false;</span></span>
<span id="L282"><span class="lineNum">     282</span> <span class="tlaUNC">           0 : }</span></span>
<span id="L283"><span class="lineNum">     283</span>              : </span>
<span id="L284"><span class="lineNum">     284</span>              : // 列出所有用户</span>
<span id="L285"><span class="lineNum">     285</span> <span class="tlaUNC">           0 : std::vector&lt;User&gt; UserManager::ListUsers() const {</span></span>
<span id="L286"><span class="lineNum">     286</span> <span class="tlaUNC">           0 :   std::vector&lt;User&gt; user_list;</span></span>
<span id="L287"><span class="lineNum">     287</span>              : </span>
<span id="L288"><span class="lineNum">     288</span> <span class="tlaUNC">           0 :   for (const auto &amp;pair : users_) {</span></span>
<span id="L289"><span class="lineNum">     289</span> <span class="tlaUNC">           0 :     user_list.push_back(pair.second);</span></span>
<span id="L290"><span class="lineNum">     290</span>              :   }</span>
<span id="L291"><span class="lineNum">     291</span>              : </span>
<span id="L292"><span class="lineNum">     292</span> <span class="tlaUNC">           0 :   return user_list;</span></span>
<span id="L293"><span class="lineNum">     293</span> <span class="tlaUNC">           0 : }</span></span>
<span id="L294"><span class="lineNum">     294</span>              : </span>
<span id="L295"><span class="lineNum">     295</span>              : // 列出用户权限</span>
<span id="L296"><span class="lineNum">     296</span>              : std::vector&lt;Permission&gt;</span>
<span id="L297"><span class="lineNum">     297</span> <span class="tlaUNC">           0 : UserManager::ListUserPermissions(const std::string &amp;username) const {</span></span>
<span id="L298"><span class="lineNum">     298</span> <span class="tlaUNC">           0 :   std::vector&lt;Permission&gt; user_permissions;</span></span>
<span id="L299"><span class="lineNum">     299</span>              : </span>
<span id="L300"><span class="lineNum">     300</span> <span class="tlaUNC">           0 :   for (const auto &amp;perm : permissions_) {</span></span>
<span id="L301"><span class="lineNum">     301</span> <span class="tlaUNC">           0 :     if (perm.username == username) {</span></span>
<span id="L302"><span class="lineNum">     302</span> <span class="tlaUNC">           0 :       user_permissions.push_back(perm);</span></span>
<span id="L303"><span class="lineNum">     303</span>              :     }</span>
<span id="L304"><span class="lineNum">     304</span>              :   }</span>
<span id="L305"><span class="lineNum">     305</span>              : </span>
<span id="L306"><span class="lineNum">     306</span> <span class="tlaUNC">           0 :   return user_permissions;</span></span>
<span id="L307"><span class="lineNum">     307</span> <span class="tlaUNC">           0 : }</span></span>
<span id="L308"><span class="lineNum">     308</span>              : </span>
<span id="L309"><span class="lineNum">     309</span>              : // 获取最后一次错误信息</span>
<span id="L310"><span class="lineNum">     310</span> <span class="tlaGNC tlaBgGNC">          10 : const std::string &amp;UserManager::GetLastError() const { return last_error_; }</span></span>
<span id="L311"><span class="lineNum">     311</span>              : </span>
<span id="L312"><span class="lineNum">     312</span>              : // 移除用户的所有权限</span>
<span id="L313"><span class="lineNum">     313</span> <span class="tlaUNC tlaBgUNC">           0 : void UserManager::RemoveUserPrivileges(const std::string &amp;username) {</span></span>
<span id="L314"><span class="lineNum">     314</span> <span class="tlaUNC">           0 :   auto new_end = std::remove_if(</span></span>
<span id="L315"><span class="lineNum">     315</span>              :       permissions_.begin(), permissions_.end(),</span>
<span id="L316"><span class="lineNum">     316</span> <span class="tlaUNC">           0 :       [&amp;](const Permission &amp;perm) { return perm.username == username; });</span></span>
<span id="L317"><span class="lineNum">     317</span>              : </span>
<span id="L318"><span class="lineNum">     318</span> <span class="tlaUNC">           0 :   permissions_.erase(new_end, permissions_.end());</span></span>
<span id="L319"><span class="lineNum">     319</span> <span class="tlaUNC">           0 : }</span></span>
<span id="L320"><span class="lineNum">     320</span>              : </span>
<span id="L321"><span class="lineNum">     321</span>              : } // namespace sqlcc</span>
        </pre>
              </td>
            </tr>
          </table>
          <br>

          <table width="100%" border=0 cellspacing=0 cellpadding=0>
            <tr><td class="ruler"><img src="../../../../../glass.png" width=3 height=3 alt=""></td></tr>
            <tr><td class="versionInfo">Generated by: <a href="https://github.com//linux-test-project/lcov" target="_parent">LCOV version 2.0-1</a></td></tr>
          </table>
          <br>

</body>
</html>
